Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/najBQqT2olWE08kevELmXwGT57k.roa
File: najBQqT2olWE08kevELmXwGT57k.roa (raw, json)
Hash identifier: jNHLSsFQzYHW7iCGieIcoIMgADSGMSuS0qYYEJ2UrZ0=
Subject key identifier: 9D:A8:C1:42:A4:F6:A2:55:84:D3:C9:1E:BC:42:E6:5F:01:93:E7:B9
Certificate issuer: /CN=52056867e4d2885e99b549ed6fb786330adf8f44
Certificate serial: 0194258F71DB6F078935D80B9DFA9D9989B4
Authority key identifier: 52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/najBQqT2olWE08kevELmXwGT57k.roa
Signing time: Thu 02 Jan 2025 05:49:05 +0000
ROA not before: Thu 02 Jan 2025 05:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 178.239.128.0/20 maxlen: 24
195.93.178.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:71:db:6f:07:89:35:d8:0b:9d:fa:9d:99:89:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52056867e4d2885e99b549ed6fb786330adf8f44
Validity
Not Before: Jan 2 05:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9da8c142a4f6a25584d3c91ebc42e65f0193e7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:99:7c:51:94:7b:5f:87:f3:53:24:95:b0:cc:
bd:33:0f:1f:69:79:8e:09:db:b4:57:58:62:1c:d4:
26:aa:1e:9c:d9:47:b5:41:a3:7d:cf:af:2c:16:ff:
8c:40:2f:d4:26:bc:80:b3:4e:5e:55:9b:53:80:f4:
4f:dc:6f:eb:ec:b9:39:bc:d0:ca:41:3d:e2:27:7a:
f1:b0:cf:17:0e:1b:bc:8c:41:04:f7:8e:2d:c5:b7:
eb:db:bf:8a:c1:c8:94:69:14:50:e1:75:56:7c:4e:
8f:07:11:b2:ac:48:b7:1d:19:57:ae:8c:ee:b4:c2:
09:81:bf:69:6f:e7:62:e1:32:dd:de:45:01:f1:3d:
20:ad:44:7f:75:61:07:2b:b7:5c:5a:0e:80:10:5b:
8d:61:86:84:60:5b:7c:d6:e2:a6:91:34:3d:f5:c7:
95:14:dc:83:d4:5c:b1:85:ad:b3:e8:f6:f2:b3:9d:
8d:e9:15:9a:db:2b:68:75:b5:bf:0a:4c:6d:8d:1e:
97:f9:38:11:2f:1b:93:c7:19:f0:31:53:91:e6:dd:
52:6b:da:c4:5f:de:4e:18:2b:39:c5:47:c7:e2:44:
39:36:2f:5c:f1:f0:4a:fc:85:9e:d5:55:da:ec:76:
0e:d3:7f:5b:57:1f:11:01:66:64:7c:10:84:a8:91:
10:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A8:C1:42:A4:F6:A2:55:84:D3:C9:1E:BC:42:E6:5F:01:93:E7:B9
X509v3 Authority Key Identifier:
keyid:52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/najBQqT2olWE08kevELmXwGT57k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.128.0/20
195.93.178.0/23
Signature Algorithm: sha256WithRSAEncryption
cb:ab:f1:72:d0:87:9d:50:94:49:ee:ee:fe:b9:21:41:4b:f1:
2f:ac:97:68:52:61:c1:ad:13:e3:10:25:c3:0e:60:28:5f:2f:
e0:d0:c1:0c:32:58:11:33:0c:18:10:69:5c:c3:23:b5:8a:90:
42:25:bb:31:1f:e2:a4:b3:b1:a1:63:77:14:4f:c9:35:5d:4b:
5c:10:00:44:b9:50:6a:0c:a3:77:0a:b6:c0:bc:30:03:d5:ce:
78:65:88:b2:91:7f:d0:1f:59:3f:55:a1:5c:37:c6:1a:e9:ea:
e9:d6:39:21:7f:d8:76:19:c3:39:7b:0e:a1:5e:88:c0:04:5a:
ea:54:76:e5:9b:a3:61:b8:91:7e:b8:b6:e3:0f:48:86:8a:ea:
3f:f8:d7:ce:b4:58:ed:97:a9:f9:41:fa:d0:d9:6d:76:da:00:
b8:08:65:f7:09:3b:f2:87:68:6e:6e:0f:e8:e2:45:3b:5d:a2:
d6:69:0d:c9:49:88:4d:76:63:42:1c:72:b2:c4:27:b3:ec:09:
66:4a:21:58:81:6d:29:8a:cb:fb:b1:0d:26:b1:11:29:da:c4:
bc:c9:78:6d:dc:bc:0c:96:ff:67:df:f8:cf:62:38:ca:61:f0:
21:a7:ea:e2:ce:09:67:7e:9a:89:06:00:66:c1:ee:7d:f7:ff:
6e:77:f9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:40 2025 by rpki-client